committing-changes
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes the
!command syntax to executegit status,git diff HEAD, andgit log --oneline -10when the skill is loaded. These commands are used to provide the agent with current repository context and are benign in this context. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources including Git command outputs and user-provided arguments, presenting an indirect prompt injection surface.
- Ingestion points: Workspace state via
git status,git diff,git log, and user input via$ARGUMENTSinSKILL.md. - Boundary markers: No explicit delimiters or instructions are used to separate the ingested Git data from the skill instructions.
- Capability inventory: The skill has the ability to stage files (
git add) and create commits (git commit). - Sanitization: The skill utilizes a HEREDOC pattern for the
git commitcommand, which helps prevent shell injection in the commit message.
Audit Metadata